Privacy Policy

bandarjudi ("we", "us", "our", or "the Company") operates the online gambling platform accessible at bandarjudi.cam. In the course of providing our services, we collect and process personal data relating to users ("you", "your", or "the User") who register, access, or otherwise interact with the platform.

This Privacy Policy has been prepared to inform you clearly and transparently about our data practices. It sets out the categories of personal information bandarjudi collects, the purposes for which that information is used, the parties with whom it may be shared, the security measures we apply to protect it, and the rights available to you regarding your personal data.

By creating a bandarjudi account or continuing to use the platform following publication of this Policy, you acknowledge that you have read and understood the practices described herein. This Policy forms part of, and should be read together with, the bandarjudi Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• Personal Data: Any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, account ID, email address, payment details, IP address, and device identifiers.
• Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• Data Controller: The entity that determines the purposes and means of processing Personal Data — in this case, bandarjudi.
• Data Processor: A third party that processes Personal Data on behalf of the Data Controller under contractual instruction.
• Sensitive Data: A subset of Personal Data that warrants heightened protection, including financial account details, identity document numbers, and data relating to vulnerable individuals.
• Cookie: A small text file placed on a user's device by a website to store session, preference, or tracking information.
• KYC: Know Your Customer — the regulatory identity and verification process applied to account holders before withdrawals or account features are activated.

bandarjudi collects only the personal data necessary to operate its services, comply with applicable regulations, and provide a secure and reliable user experience. The categories of data we collect are as follows:

4.1 Information You Provide Directly

The majority of personal data bandarjudi holds is information you provide voluntarily when registering an account, completing KYC verification, submitting a payment, contacting support, or participating in a promotion. This includes account registration forms, identity document uploads, and any written communication sent to bandarjudi.

4.2 Information Collected Automatically

When you access and use the bandarjudi platform, our systems automatically collect certain Technical Data and Usage Data. This is collected through server logs, session management systems, and browser-level analytics tools. Automatic data collection helps bandarjudi identify unusual access patterns, maintain platform stability, and understand how users navigate the service.

4.3 Information from Third Parties

bandarjudi may receive supplementary identity or fraud-related information from third-party KYC verification service providers, payment processors (including FPX gateway operators and Malaysian e-wallet providers), and fraud prevention databases. Such information is used solely to verify user identity and protect the integrity of the platform.

bandarjudi processes personal data on the following legal grounds, consistent with internationally recognised privacy principles:

• Contractual Necessity: Processing is required to create and manage your account, process transactions, and deliver the services you have requested. Without this processing, bandarjudi cannot fulfil its contractual obligations to you.
• Legal and Regulatory Obligation: bandarjudi is obligated to collect and retain certain data for KYC, anti-money laundering (AML), fraud prevention, and age verification purposes. Compliance with such obligations is non-negotiable and is required by the terms of our international operating licence.
• Legitimate Interests: bandarjudi processes certain data — particularly Technical Data and Usage Data — to protect the security of the platform, prevent fraud, improve services, and ensure platform integrity. These interests are balanced against user privacy rights.
• Consent: Where processing is not required by contract or law, and where it does not fall within our legitimate interests, bandarjudi will request your specific, informed consent. You may withdraw consent at any time by contacting support, though withdrawal does not affect the lawfulness of prior processing.

bandarjudi uses your personal data only for the purposes set out in this Policy. The primary uses of personal data collected from bandarjudi users are as follows:

• To create, verify, and maintain your bandarjudi account, including the application of responsible gambling settings and limits you configure.
• To process deposits and withdrawals in MYR via your selected payment method, including FPX, DuitNow, Malaysian bank transfers, and e-wallet providers.
• To verify your identity and age in compliance with KYC and age-restriction requirements — bandarjudi is for adults aged 21 and above only.
• To detect, investigate, and prevent fraudulent, abusive, or unlawful activity on the platform.
• To provide customer support and resolve account or payment queries submitted via live chat or email.
• To send transactional communications, including account confirmations, payment receipts, security alerts, and important policy updates.
• To monitor responsible gambling indicators and apply safeguards where usage patterns suggest a user may be at risk.
• To improve the functionality, performance, and content of the bandarjudi platform through aggregated usage analysis.
• bandarjudi does not use your personal data to send unsolicited third-party marketing materials without your explicit consent.
• bandarjudi does not sell, rent, or licence your personal data to third parties for their independent commercial use.

bandarjudi does not sell personal data. We share personal data only in the circumstances described below and only to the extent necessary for the specified purpose:

7.1 Service Providers and Data Processors

bandarjudi engages third-party service providers who process data on our behalf under binding contractual agreements. These include KYC and identity verification providers, payment gateway operators (including those facilitating FPX, DuitNow, and e-wallet transactions), fraud detection services, customer support infrastructure providers, and hosting and cloud infrastructure operators. All processors are required to handle data in accordance with bandarjudi's instructions and applicable privacy standards.

7.2 Legal and Regulatory Disclosure

bandarjudi may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other public bodies where required to do so by applicable law, court order, or the terms of our international operating licence. In such cases, bandarjudi will disclose only the minimum data required to comply with the relevant obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of the Company's assets, personal data held by bandarjudi may be transferred to the acquiring or successor entity. Users will be notified of any such transfer through the email address registered on their account within a reasonable period before completion.

7.4 With Your Consent

bandarjudi will not disclose your personal data to any third party outside the categories listed above without your prior, informed, and specific written consent.

bandarjudi retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a minimum of five years following account closure, to comply with AML, KYC, and licensing record-keeping obligations.
• Transaction records: Financial and betting transaction logs are retained for a minimum of seven years in accordance with internationally recognised financial record-keeping standards.
• Support communications: Live chat and email records are retained for up to three years for quality assurance, dispute resolution, and training purposes.
• Technical and usage data: Retained in aggregated or pseudonymised form for up to two years for analytics and security purposes.
• Marketing consent records: Retained for the duration of the consent period and for one year after withdrawal of consent, to demonstrate compliance.

bandarjudi applies a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport-layer encryption (TLS) applied to all data transmitted between your device and the bandarjudi platform
• Encryption of sensitive data fields — including payment details and identity document references — at rest within bandarjudi's database infrastructure
• Hashed password storage using industry-standard algorithms; bandarjudi never stores user passwords in recoverable plain text
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Automated monitoring for anomalous login patterns, suspicious transactions, and potential data exfiltration activity
• Regular review of third-party processor security standards and contractual data protection obligations

While bandarjudi applies these measures with due diligence, no online system can guarantee absolute security. Users are encouraged to use strong, unique passwords, enable two-factor authentication where offered, and notify bandarjudi support immediately if they suspect any unauthorised access to their account.

10.1 What Cookies We Use

bandarjudi uses cookies and similar technologies — including local storage and session tokens — to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. The primary categories of cookies bandarjudi deploys are:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session authentication tokens and security cookies.
• Functional cookies: Remember your preferences such as display settings and language. Disabling these may affect your experience but will not prevent access to the platform.
• Analytical cookies: Collect anonymised data about how users navigate the platform, which pages are visited most, and where users encounter difficulties. This data helps bandarjudi improve the service.

10.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set alerts when cookies are placed. Note that disabling strictly necessary cookies will prevent you from logging in to the bandarjudi platform. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

Subject to applicable legal and regulatory constraints — particularly those arising from our KYC, AML, and licensing obligations — bandarjudi recognises and honours the following data subject rights:

To exercise any of the rights listed above, please contact us at the email address specified in Section 15. bandarjudi will respond to verified requests within 30 calendar days. We may request proof of identity before processing any rights request to ensure that data is not disclosed to or modified by unauthorised parties.

The bandarjudi platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the account registration and KYC process, and bandarjudi reserves the right to request documentary proof of age at any point during the account lifecycle.

If bandarjudi becomes aware that personal data has been collected from a user who is under the age of 21, we will immediately suspend the account, delete the associated personal data to the extent not prohibited by legal retention obligations, and take appropriate steps consistent with our responsible gambling obligations.

Parents and guardians who believe that a minor may have registered on the bandarjudi platform are urged to contact our support team immediately using the contact details set out in Section 15.

bandarjudi operates under international online gambling licensing, and our infrastructure and service providers may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to, stored in, or processed in countries other than Malaysia, including jurisdictions within Europe, Southeast Asia, and other regions.

Where such transfers take place, bandarjudi ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to or exceeding the protections described in this Policy. These safeguards may include contractual clauses obligating processors to maintain appropriate data protection standards, technical security measures, and access controls.

bandarjudi reserves the right to amend, update, or replace this Privacy Policy at any time. Where changes are material — for example, where they affect the categories of data collected, the purposes of processing, or the rights available to users — bandarjudi will endeavour to provide reasonable advance notice by publishing the updated Policy on the platform with a revised effective date and version number.

The current effective version of this Privacy Policy is always accessible at bandarjudi.cam/privacy-policy. It is the User's responsibility to review this page periodically to remain informed about how bandarjudi protects personal data. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not accept the amended Privacy Policy, you should cease using the platform and may request account closure through the support channels set out in Section 15.

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a concern about how bandarjudi has handled your personal information, please contact us through one of the following channels.

Live Chat

24/7 live chat support is available from within your account dashboard. For privacy-related requests, please state your query clearly and include "Privacy Request" at the beginning of your message. Response time: typically under five minutes.

Email

For formal privacy rights requests, written complaints, or detailed data processing enquiries, please contact us by email at the address below. Note that this address is provided as plain text only and is not a clickable link:

[email protected]

Please include your registered account email address, the nature of your request, and sufficient detail for us to identify and process your query accurately. bandarjudi will acknowledge receipt of formal privacy requests within 5 business days and will aim to resolve them within 30 calendar days.

Related Policies

For information about how bandarjudi handles responsible gambling data and self-exclusion records, please visit our Responsible Gambling page. For details on account eligibility and platform rules, please refer to the Terms & Conditions.